Actions
Bug #24015
closed
Use Content-Security-Policy strict headers
Pull Request:
Severity:
Trivial - no functional impact | cosmetic
UX impact:
User visibility:
Effort required:
Large
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No
Description
We would like to use strict Content-Security-Policy headers when returning HTTP response headers to enforce better security of the HTML pages in Rudder webapp.
It follows CSP 3 specification (https://www.w3.org/TR/CSP3/) and is implemented by common and modern web browsers
Updated by 
Updated by 
Updated by
Actions